Behavioral task
behavioral1
Sample
44ee0bcc3bfbc3d53b2e8b34bd0d59e0_NeikiAnalytics.exe
Resource
win7-20240419-en
General
-
Target
44ee0bcc3bfbc3d53b2e8b34bd0d59e0_NeikiAnalytics
-
Size
2.7MB
-
MD5
44ee0bcc3bfbc3d53b2e8b34bd0d59e0
-
SHA1
080fb289185c4918d7f38a9017e89aaa7d7442db
-
SHA256
1949770e993eb49cffa4d155ad1ce1c968115ba7078196dcf29d1a99b8993f56
-
SHA512
08981960da7fe8666da0d07dd23388b54d862a519eab44351720af4a4c64f69724776a37533e6a886c5468ccfe1755b245a8ad9dfe930b8cf8633483038ba1d9
-
SSDEEP
49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0IEFToCr:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Rs
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44ee0bcc3bfbc3d53b2e8b34bd0d59e0_NeikiAnalytics
Files
-
44ee0bcc3bfbc3d53b2e8b34bd0d59e0_NeikiAnalytics.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE